Security Advisory

CVE-2019-3864

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-21 15:44:00

Last updated 2024-08-04 19:19:18

Assigner redhat

CVSS score 5.4

State PUBLISHED

Description

A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specific parameter which is used as a CSRF token. The token is not refreshed for every request or when a user logged out and in again. An attacker could use a leaked token to gain access to the system using the user's account.

← Browse all CVEs View on cve.org ↗